<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:12pt"><div>I have an ADFS IDP that connects to my Shib SP. Recently they were getting a signing error out of the blue... So, they re-loaded my metadata and I did the same and the signing error went away but now what we see is this:</div><div><br></div><blockquote style="border: none; padding: 0px;"><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">Using SP initiated link, they are challenged for credentials.</div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">After entering the credentials they get a
redirect loop error on the browser. In a trace I see it bouncing between 2 requests on their side:</div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;">If they hit the SP initiated link again, they end up on my site logged in just fine.</div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;"><br></div></blockquote>So I would guess that metadata is not the issue since it correctly authenticates after the redirect loop stops and they re-attempt the connection.<div><br></div><div>In a fiddler trace I see it bouncing between these 2:</div><div><br></div><div><div>17<span class="Apple-tab-span" style="white-space:pre"> </span>302<span class="Apple-tab-span"
style="white-space:pre"> </span>HTTPS<span class="Apple-tab-span" style="white-space:pre"> </span>adfs.customerdomain.com<span class="Apple-tab-span" style="white-space:pre"> </span>/adfs/ls/auth/integrated/?SAMLRequest=<request here></div><div>18<span class="Apple-tab-span" style="white-space:pre"> </span>302<span class="Apple-tab-span" style="white-space:pre"> </span>HTTPS<span class="Apple-tab-span" style="white-space:pre"> </span>adfs.customerdomain.com<span class="Apple-tab-span" style="white-space:pre"> </span>/adfs/ls/?SAMLRequest=<request here></div><div><br></div><div>I know this is the Shib lstSrv and I am asking partially about ADFS here. If you think this question is not appropriate for the list, feel free to respond to me directly instead of on the list here.</div><div><br></div><div>Thanks!</div></div></div></body></html>